Linux, servers, and security
Notes on Linux, application security, deployment and the web. Every post is something I actually run, not something I read about.
grep 4/4
- Nov 12, 2026 Apache CVE-2026-119618: check if HTTP/2 is enabled and turn it off A critical mod_http2 flaw in Apache 2.4.55 through 2.4.70, fixed in 2.4.71. How to check whether your server loads mod_http2, on a plain install, RunCloud and ServerPilot, and how to switch it off until you can patch.
- Oct 8, 2026 MySQL OFF.000001 files filling my disk: what they are and how to remove them Files named OFF.000014, OFF.000029 in /var/lib/mysql are MySQL binary logs, created by a config line meant to switch them off. Why it happens and how to clean them up safely on a production server.
- Sep 25, 2026 Cutting Netdata's CPU use on a small Docker droplet Netdata's defaults ate half the CPU of an idle 2 vCPU droplet running self-hosted Supabase in Docker. Here's which settings caused it, how to turn them down, and what you give up.
- Aug 18, 2026 Watching a server for modified files with Wazuh A file integrity monitor that catches a webshell within seconds, names the process that wrote it, and emails me about it without burying me in noise.